Software Architect, Security Specialist

atAfyaRemote

Brazil Full-time Cybersecurity / Security EngineerMid-levelSenior

Posted Sep 22

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Collaborate across the Digital Services for Medical Practice team, concentrating on the iClinic ecosystem.

• Advance product architecture and assist in technical decision-making from the discovery phase to go-live.

• Ensure that solutions achieve scalability, security, resilience, performance, and efficiency.

• Contribute to the integration and advancement of Afya’s technology ecosystem.

• Define and enhance software architecture with a focus on Security by Design.

• Inform decisions by assessing trade-offs related to security, scalability, performance, resilience, cost, and delivery speed.

• Aid in establishing technology stacks, frameworks, tools, and technical standards.

• Collaborate with Engineering, Product, Data, Security, and Infrastructure teams.

• Define and advocate for standards in architecture, secure development, technical documentation, version control, deployment, and secrets management.

• Conduct technical and architectural evaluations, impact analyses, and provide mentoring.

• Identify and mitigate technical debt, vulnerabilities, and architectural risks.

• Support DevSecOps practices within CI/CD pipelines, including automated security controls and analyses.

• Guide decisions related to cloud, observability, resilience, cost-effectiveness, and security within AWS environments.

• Assist in system modernization, integration, and evolution projects, focusing on APIs, messaging, service-oriented architecture, and interoperability.

• Collaborate with Information Security and Infrastructure teams to enhance application protection and ensure environmental compliance.

• Act as a technical reference while promoting engineering best practices and architectural maturity.

⛳️ Requirements

• Extensive experience as a Software Architect on medium to large-scale digital products.

• Strong, hands-on expertise with AWS — a mandatory requirement.

• Familiarity with cloud platforms, Kubernetes, and infrastructure environments.

• Understanding of software architecture and patterns, including microservices, event-driven architecture, and Domain-Driven Design (DDD).

• Experience incorporating security into software architecture, including Security by Design principles.

• Knowledge of IAM, OAuth/OIDC, SSO, secrets management, and fundamental cryptography.

• Experience with APIs, integrations, messaging, and distributed systems.

• Understanding of CI/CD, DevSecOps, and security practices throughout the software development lifecycle.

• Familiarity with infrastructure as code tools such as Terraform or CloudFormation.

• Ability to analyze scenarios, make architectural decisions, and document technical trade-offs and decisions clearly.

• Strong communication skills with the capacity to technically influence diverse stakeholders.

• An autonomous, collaborative, and proactive profile, capable of serving as a technical reference.

• Nice to have: experience in the HealthTech sector; experience with products related to healthcare or medical practice; background in protecting sensitive data, particularly health-related data; knowledge of Brazil’s LGPD, ISO 27001, NIST CSF, or other security and compliance frameworks; experience with AI and Artificial Intelligence applications; familiarity with the AWS Well-Architected Framework and AWS Security Reference Architecture (SRA).